HIPAA and PHIPA Privacy Legislation

Privacy legislation governs the movement of identifiable health information: who may collect it, why it may be used, where it may be stored, and when it may be disclosed. Confidentiality is the nurse’s professional duty to protect that information from unauthorized access, conversation, or transmission. A patient’s diagnosis, medication list, laboratory results, photographs, appointment details, and even the fact that the person is receiving care may be sensitive information. The two names in this topic belong to different legal systems. PHIPA governs personal health information in Ontario. HIPAA governs protected health information within the United States’ covered-entity framework. They share a safety principle: health information is not available simply because someone asks for it. The nurse must connect every disclosure to a valid purpose, a lawful basis, and a secure method. Privacy does not mean withholding information when delay could cause serious harm. An emergency disclosure may be necessary without consent, but it remains limited to information needed to prevent harm or support urgent treatment. The exception is a narrow safety route, not a general permission to share.